Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/1W82at7mSiuchX3iCzO6G2WZfjs.roa
File: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (raw, json)
Hash identifier: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=
Subject key identifier: D5:6F:36:6A:DE:E6:4A:2B:9C:85:7D:E2:0B:33:BA:1B:65:99:7E:3B
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019C7058C9B66D2C9E3DD452C4B476453221
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/1W82at7mSiuchX3iCzO6G2WZfjs.roa
Signing time: Wed 18 Feb 2026 10:43:12 +0000
ROA not before: Wed 18 Feb 2026 10:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61002
IP address blocks: 77.111.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:58:c9:b6:6d:2c:9e:3d:d4:52:c4:b4:76:45:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Feb 18 10:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d56f366adee64a2b9c857de20b33ba1b65997e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:d7:bd:f1:64:0f:45:71:47:32:7e:7c:15:
23:74:1b:e8:52:e8:d2:bf:0b:84:27:48:0b:c0:fa:
41:6d:80:8f:a6:76:db:e8:75:78:d9:be:1c:6d:9d:
83:c4:46:cf:19:68:88:30:72:04:89:12:44:ae:12:
e6:d8:e7:66:d0:db:41:9a:1c:fa:db:a2:d9:f9:d1:
43:3b:64:65:a3:6f:2e:50:60:cb:43:d9:ba:1f:74:
e3:65:76:69:c8:f7:dd:d9:a3:b6:97:d5:93:9e:76:
d3:63:25:b2:4a:ac:1a:d3:d8:b6:af:58:13:7f:c4:
66:48:bf:3c:bd:93:a7:cf:c9:d2:f7:62:b7:d1:36:
f2:16:4d:55:e8:de:cc:c4:4b:d1:91:22:0b:dc:fa:
5a:e3:a1:a0:17:e2:5d:75:fa:74:f3:c4:f4:99:2b:
0b:e6:d3:ae:99:7e:95:61:d5:38:2d:f5:9b:8b:2e:
e3:5e:b2:22:af:63:0d:02:c3:84:7b:73:41:4a:13:
81:e3:29:7a:83:a3:61:c9:7a:a8:41:ea:13:3a:70:
1f:60:1a:5c:4e:56:84:db:6a:bb:3c:46:06:bd:9e:
3d:93:a0:c4:f6:1d:1f:4d:4c:f4:24:71:1c:ff:b1:
ca:eb:df:02:8b:69:bc:f2:80:61:fb:b1:81:8d:80:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:36:6A:DE:E6:4A:2B:9C:85:7D:E2:0B:33:BA:1B:65:99:7E:3B
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/1W82at7mSiuchX3iCzO6G2WZfjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.80.0/22
Signature Algorithm: sha256WithRSAEncryption
e8:61:6e:a7:7c:8b:d7:46:54:09:d1:13:b9:dd:4b:db:ce:47:
b4:9b:d9:c7:52:4c:bd:5c:be:e5:f9:0a:72:24:52:ef:40:48:
ee:62:7f:3e:20:7c:a8:35:c5:7d:df:ba:18:c3:7d:90:1d:6d:
17:29:1a:29:9d:25:ec:ac:ec:b2:8c:f7:2d:a5:5e:f5:dc:ac:
e4:02:8d:ea:42:ce:b9:9a:96:35:46:7c:d5:2f:89:32:ff:f0:
84:79:01:d9:ef:3a:60:14:9a:59:4d:73:87:68:38:06:dd:3d:
b2:0e:c5:87:1e:54:66:ec:a3:c7:62:ee:e5:e0:e0:ce:b2:48:
0b:5d:4b:92:5c:6f:43:7b:7d:33:a3:d4:3e:71:35:e6:40:80:
de:bc:22:97:92:65:c6:31:a6:10:23:d5:71:db:0a:1d:8b:c9:
d6:bf:7d:9f:08:92:4b:24:db:6a:e1:32:9e:d9:00:1c:8d:c3:
18:86:31:8c:fd:0d:75:08:08:16:01:df:17:12:ab:15:29:f1:
06:e2:17:cf:29:f5:9f:af:12:ea:13:1c:1e:c3:b7:a8:cc:21:
5f:29:e4:9a:5e:2a:b6:c6:df:b6:a2:0f:ec:2d:8c:88:46:df:
16:1a:48:ad:47:3e:3e:47:00:1b:58:16:c9:d7:66:df:9c:20:
a2:26:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:02:18 2026 by rpki-client